Alternatives and similar repositories for Doge-COFFLdr

Users that are interested in Doge-COFFLdr are comparing it to the libraries listed below

• knightswd / WindowsHackCode

  View on GitHub
  Code with Windows Hacker
  ☆12Oct 14, 2022Updated 3 years ago
• latortuga71 / GOCoffLoader

  View on GitHub
  Its a coff loader ported to go
  ☆20Oct 2, 2022Updated 3 years ago
• CBLabresearch / PhantomExecution

  View on GitHub
  Self Cleanup in post-ex job
  ☆59Sep 10, 2024Updated last year
• timwhitez / memmod

  View on GitHub
  Fork & modify of Wireguard's Memmod
  ☆33Aug 2, 2023Updated 2 years ago
• Gakamine / EFREI-C2-Example

  View on GitHub
  A simple C2 using Google Translate Webpage for data evasion
  ☆12Jan 30, 2023Updated 3 years ago
• timwhitez / Doge-DumpMem

  View on GitHub
  dump lsass
  ☆37May 24, 2022Updated 3 years ago
• akkuman / gSchtasks

  View on GitHub
  windows task scheduler in golang
  ☆29Sep 6, 2021Updated 4 years ago
• dreamkinn / go-ThreadlessInject

  View on GitHub
  Golang implementation of @CCob's C# ThreadlessInject
  ☆31May 11, 2024Updated last year
• lz520520 / mimikatz

  View on GitHub
  A little tool to play with Windows security
  ☆12Jan 21, 2026Updated 3 weeks ago
• sliverarmory / injectAmsiBypass

  View on GitHub
  Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.
  ☆51Dec 31, 2021Updated 4 years ago
• AgeloVito / adduserbysamr-bof

  View on GitHub
  Cobalt Strike BOF that Add a user to localgroup by samr
  ☆134Nov 30, 2022Updated 3 years ago
• seventeenman / SelfDel-BOF

  View on GitHub
  Delete file regardless of whether the handle is used via SetFileInformationByHandle
  ☆55Jul 1, 2023Updated 2 years ago
• Hagrid29 / BOF-SprayAD

  View on GitHub
  Cobalt Strike Beacon Object File (BOF) that uses LogonUserSSPI API to perform kerberos-based password spray
  ☆47Mar 4, 2023Updated 2 years ago
• Snowming04 / shellcode_generate-test_framework

  View on GitHub
  ☆17Apr 6, 2021Updated 4 years ago
• SaturnsVoid / Fuck-with-Task-Manager

  View on GitHub
  Using the Windows API to mess with Task Manager in GoLANG
  ☆15Sep 7, 2021Updated 4 years ago
• snowtech-cn / shadow-tls-client

  View on GitHub
  shadow tls client
  ☆14Dec 30, 2022Updated 3 years ago
• lwch / crpc

  View on GitHub
  golang rpc框架，支持数据加密传输
  ☆13Jan 19, 2026Updated 3 weeks ago
• sairson / go-Win32Code

  View on GitHub
  This is learning to write windows 32 api instance code in the golang language
  ☆42Jan 14, 2022Updated 4 years ago
• timwhitez / Doge-RL

  View on GitHub
  Reflective DLL injection Execution
  ☆20Sep 9, 2022Updated 3 years ago
• Teach2Breach / rekkoex

  View on GitHub
  ☆18Aug 8, 2024Updated last year
• CrossC2 / autoRebind

  View on GitHub
  Automatically parse Malleable C2 profiled into CrossC2 rebinding library source code
  ☆21Feb 13, 2023Updated 3 years ago
• evilashz / PigSyscall

  View on GitHub
  An implementation of an indirect system call
  ☆132Aug 25, 2023Updated 2 years ago
• ScriptIdiot / sleepmask_ekko_cfg

  View on GitHub
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆49Mar 15, 2023Updated 2 years ago
• timwhitez / Bof2PIC

  View on GitHub
  BOF/COFF obj file to PIC(shellcode). by golang
  ☆39Sep 28, 2022Updated 3 years ago
• evilashz / Visual-Studio-BOF-template

  View on GitHub
  more conveniently Visual-Studio-BOF-template
  ☆75Sep 12, 2023Updated 2 years ago
• mjwhitta / win

  View on GitHub
  Windows API/constants, identity, and WinHTTP/WinINet for Go.
  ☆19Jan 13, 2026Updated last month
• jeffbuffs / Waytime

  View on GitHub
  ☆16Nov 19, 2023Updated 2 years ago
• timwhitez / ScareCrow-Common

  View on GitHub
  ScareCrow loader binary source which easier to read and learn
  ☆25Apr 14, 2022Updated 3 years ago
• coleak2021 / vehsyscall

  View on GitHub
  vehsyscall:a syscall project that may bypass EDR
  ☆62Mar 1, 2024Updated last year
• timwhitez / Doge-RecycledGate

  View on GitHub
  Golang implementation of Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll;
  ☆32Mar 22, 2022Updated 3 years ago
• praetorian-inc / goffloader

  View on GitHub
  A Go implementation of Cobalt Strike style BOF/COFF loaders.
  ☆265Feb 22, 2025Updated 11 months ago
• Yaxser / COFFLoader2

  View on GitHub
  Load and execute COFF files and Cobalt Strike BOFs in-memory
  ☆226Sep 13, 2022Updated 3 years ago
• sairson / WebGuard

  View on GitHub
  WebGuard是根据 风起师傅的RedGuard 和 mgeeky师傅的RedWarden结合出来的http请求过滤器go包，亦在帮助采用go编写C2 http监听器做流量过滤和规则匹配
  ☆29Jun 26, 2022Updated 3 years ago
• M0nster3 / RpcsDemo

  View on GitHub
  关于RPC一些绕EDR的tips
  ☆198Mar 3, 2023Updated 2 years ago
• timwhitez / CLR-RWX

  View on GitHub
  Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间
  ☆22Sep 28, 2022Updated 3 years ago
• M0nster3 / Beacon

  View on GitHub
  重构Beacon
  ☆164Aug 19, 2024Updated last year
• baiyies / ScreenshotBOFPlus

  View on GitHub
  Take a screenshot without injection for Cobalt Strike
  ☆203Jun 7, 2023Updated 2 years ago
• timwhitez / Doge-MemX

  View on GitHub
  Golang implementation of Reflective load PE from memory
  ☆64Jan 10, 2022Updated 4 years ago
• qi4L / Unhooker-go

  View on GitHub
  EDR绕过demo
  ☆294Jan 14, 2024Updated 2 years ago